joi before versions 17.13.8 and 18.2.9 contains a prototype pollution vulnerability in the messages compilation function that accepts __proto__ as an error code. Attackers can supply __proto__ keys in custom messages to replace the returned object's prototype, breaking downstream code relying on Object.prototype methods.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - joi before versions 17.13.8 and 18.2.9 contains a prototype pollution vulnerability in the messages
    compilation function that accepts __proto__ as an error code. Attackers can supply __proto__ keys in
    custom messages to replace the returned object's prototype, breaking downstream code relying on
    Object.prototype methods. (CVE-2026-90771)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - joi before versions 17.13.8 and 18.2.9 contains a prototype pollution vulnerability in the messages     compilation function that accepts __proto__ as an error code. Attackers can supply __proto__ keys in     custom messages to replace the returned object's prototype, breaking downstream code relying on     Object.prototype methods. (CVE-2026-90771)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
473516	Chainguard: unleash: security update to 8.2.0-r5	Tenable Cloud Security	Chainguard Local Security Checks	Local	medium
473516	Chainguard: unleash: security update to 8.2.0-r5	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	medium
472989	SCA: security update for joi (GHSA-wr44-6hxh-3jwq)	Tenable Cloud Security	SCA Checks	Local	medium
472989	SCA: security update for joi (GHSA-wr44-6hxh-3jwq)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
345677	Linux Distros Unpatched Vulnerability : CVE-2026-90771	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-90771

medium

Tenable Plugins

medium

medium

medium

medium

medium